Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303030.roa
File:                     323430613a656530303a3a2f32382d3330203d3e20313438303030.roa (raw, json)
Hash identifier:          UPGNplWMOzpgGfRXLqC9nFmGMUNyrGshHgRllKGKmqE=
Subject key identifier:   71:14:16:9D:31:BD:D1:93:33:07:99:22:79:0E:36:F2:72:FB:D9:33
Certificate issuer:       /CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Certificate serial:       49DEA09E17BC9BA405F95B5A2EF57D2266C97099
Authority key identifier: 2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303030.roa
Signing time:             Tue 20 Jun 2023 07:00:00 +0000
ROA not before:           Tue 20 Jun 2023 06:55:00 +0000
ROA not after:            Tue 18 Jun 2024 07:00:00 +0000
asID:                     148000
IP address blocks:        240a:ee00::/28 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:de:a0:9e:17:bc:9b:a4:05:f9:5b:5a:2e:f5:7d:22:66:c9:70:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
        Validity
            Not Before: Jun 20 06:55:00 2023 GMT
            Not After : Jun 18 07:00:00 2024 GMT
        Subject: CN=7114169D31BDD19333079922790E36F272FBD933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:63:f9:b9:47:de:e6:c4:eb:1a:14:d0:29:
                    94:d1:d8:f9:46:3a:75:b7:c3:dd:68:53:0b:c0:58:
                    37:0e:04:c7:59:2f:a0:22:e7:91:62:e3:ab:c7:d1:
                    04:77:2d:9f:1b:a1:45:52:0b:06:3b:d2:76:62:c4:
                    50:cb:02:28:b6:c1:81:43:08:c5:b4:6f:99:24:44:
                    17:e1:c4:ec:75:49:be:d9:18:f9:0a:8a:94:23:69:
                    9b:d8:73:57:c5:d9:f3:ac:4c:41:3b:0f:35:f6:08:
                    50:16:cb:fb:0e:ce:4d:ee:99:76:8b:ce:78:44:53:
                    b2:fc:fc:37:57:e8:be:7f:9c:36:53:68:c4:fa:e9:
                    d6:90:d6:8f:99:b9:c5:30:58:5c:e5:cf:36:59:16:
                    4d:b9:af:f5:91:1f:3d:18:5c:cb:bb:59:65:09:e6:
                    49:9c:f3:50:23:86:08:67:67:f5:d7:c6:58:2b:3e:
                    92:ae:de:9a:d1:3a:a0:be:20:01:f9:85:75:9a:d2:
                    a6:98:79:3b:fd:14:83:cb:d2:4f:6c:51:00:07:28:
                    f3:46:bc:99:cf:9f:b9:24:89:05:c2:33:c2:a1:c3:
                    0f:5f:a5:bb:49:31:61:9a:cd:64:88:3b:92:4e:65:
                    55:96:ea:5f:ae:06:bf:65:65:17:e0:e2:41:2c:d1:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:14:16:9D:31:BD:D1:93:33:07:99:22:79:0E:36:F2:72:FB:D9:33
            X509v3 Authority Key Identifier:
                keyid:2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/2C067158AEC26270809CF62CF59FA1FE4F81FAB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ee00::/28

    Signature Algorithm: sha256WithRSAEncryption
         17:89:87:39:3e:34:3c:39:e9:c2:90:12:25:65:8a:fc:bc:f1:
         de:5a:a7:72:f5:c2:72:db:fa:33:81:d1:20:a3:bf:96:8c:d8:
         3a:a1:17:dd:df:be:3b:b0:85:53:58:09:6b:ba:c1:af:66:f4:
         d1:50:0c:ab:c2:e4:95:0d:4a:a5:52:f2:59:c6:6f:fe:df:52:
         06:3c:fc:6c:b4:6e:39:1b:32:6a:2e:e6:7e:04:14:e0:55:77:
         4b:5b:2d:20:f3:33:51:ba:60:08:1e:8d:ac:fe:d0:c5:25:37:
         3c:81:82:4d:b8:c9:58:69:03:1f:25:3a:d0:bb:e4:ce:40:2e:
         55:dd:a9:dd:7f:f2:29:98:64:72:b9:b2:38:00:b2:db:75:c9:
         3b:fa:52:de:97:c5:3d:31:89:23:32:cb:0e:08:f5:ab:a7:87:
         bb:6a:ef:3d:64:43:da:86:aa:75:51:ad:8f:a6:ec:6e:bc:b5:
         5c:22:4f:27:9a:c8:72:99:24:60:83:3c:1b:9f:18:6a:0a:82:
         db:c1:47:52:d4:8b:35:a6:e2:7b:01:d2:cb:9d:81:d6:f1:fa:
         fd:7c:63:06:ea:50:c2:84:51:36:93:79:40:39:f9:bd:f9:6a:
         ed:ed:c9:0a:65:cf:29:91:cb:9c:1e:8d:85:4f:80:bb:6f:18:
         bb:f1:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----